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TRACT OF THE DISCLOSURE 


secure data broker has been developed, v^hich provides a restricted message 
based data exchange between a client application and a secured information resource by 
allowing registered or verified messages to be brokered across a security barrier. In some 
configurations, bothxequests and responses are validated and brokered across the security 
barrier. In other configuration, either requests or responses are validated. To support 
validation, messages are forHiatted in accordance with a predefined message specification 
for at least part of a transaction'^p^th between a client application and an information 
resource accessed by the client applioation. For example, in one configuration, incoming 
requests from a client application are received at a proxy that formats a corresponding 
request message and passes the formatted^mfessage to a parser for validation against the 
predefined message specification. Typically, prbdefined message specifications are 
encoded as a grammar or other functionally descriphve data representation suitable for 
directing a parser to validate a formatted message again^ a structured language 
definition. Message specifications are typically applicationWd transaction specific, 
although in some implementations, groups of applications and/br transactions may share 
common message specifications. In one configuration, messages ^formatted in 
accordance with an extensible Markup Language (XML) and messages^pecifications are 
encoded as Data Type Definitions (DTDs). 
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